https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:42:06.642185+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2024-avi-0900 certfr-2024-avi-0900 — De multiples vulnérabilités ont été découvertes dans Spring Framework. Elles permettent à un attaquant de provoquer une… 2026-10-03T10:42:06.793210+00:00 certfr-2024-avi-0900 https://cve.radiocsirt.org/vuln/cleanstart-2026-hw70472 Withdrawn: CLEANSTART-2026-HW70472 — Security fixes in activemq 5.19.8-r3 2026-10-03T10:42:06.793290+00:00

Withdrawn by the publisher.

Affected: CleanStart: activemq

Package activemq version 5.19.8-r3 fixes 29 vulnerabilities: CVE-2016-1000027, CVE-2024-38816, CVE-2024-38819, CVE-2024-38820, CVE-2024-38827...

 https://cve.radiocsirt.org/vuln/euvd-2026-204964 EUVD-2026-204964 2026-10-03T10:42:06.793343+00:00 EUVD-2026-204964 https://cve.radiocsirt.org/vuln/fkie_cve-2024-38820 fkie_cve-2024-38820 2026-10-03T10:42:06.793366+00:00

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

 https://cve.radiocsirt.org/vuln/ghsa-4gc7-5j7h-4qph GHSA-4gc7-5j7h-4qph — Spring Framework DataBinder Case Sensitive Match Exception 2026-10-03T10:42:06.793409+00:00

Affected: Maven: org.springframework:spring-context, Maven: org.springframework:spring-web

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-38820 UBUNTU-CVE-2024-38820 2026-10-03T10:42:06.793464+00:00

Affected: Ubuntu:Pro:14.04:LTS: libspring-java, Ubuntu:Pro:16.04:LTS: libspring-java, Ubuntu:Pro:18.04:LTS: libspring-java, Ubuntu:Pro:20.04:LTS: libspring-java, Ubuntu:Pro:22.04:LTS: libspring-java, Ubuntu:Pro:24.04:LTS: libspring-java, Ubuntu:25.10: libspring-java, Ubuntu:26.04:LTS: libspring-java

The fix for CVE-2022-22968 made disallowedFields patterns in DataBinder case insensitive. However, String.toLowerCase() has some Locale dependent exceptions that could potentially result in fields not protected as expected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3237 WID-SEC-W-2024-3237 — VMware Tanzu Spring Framework: Mehrere Schwachstellen 2026-10-03T10:42:06.793529+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in VMware Tanzu Spring Framework ausnutzen, um Informationen offenzulegen oder Sicherheitsmaßnahmen zu umgehen.